This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json) Hash identifier: TvNFw5ysKJmfwz2/7nLohpbjKg0PoiaVmzn3pEMkB0A= Subject key identifier: FF:6E:F9:CC:33:1A:F2:33:BF:2D:5C:A8:33:58:94:CC:52:61:C1:B8 Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7 Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7 Certificate serial: 019AF540B3863440FADF0EA70F7ACEB33E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft Manifest number: 0D4E Signing time: Sat 06 Dec 2025 20:00:49 +0000 Manifest this update: Sat 06 Dec 2025 20:00:49 +0000 Manifest next update: Sun 07 Dec 2025 20:00:49 +0000 Files and hashes: 1: D5MLLXN4CceB_y0IsVIPz32Ea_c.roa (hash: C5Fky/sLD5/418lsfJMNs8+3fuwIak8zmx88JyIH2s8=) 2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: LUMDEOQXfrX/ZMc2MgDlA7xyOISjH0m1C6IkpcibEQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b3:86:34:40:fa:df:0e:a7:0f:7a:ce:b3:3e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7 Validity Not Before: Dec 6 20:00:49 2025 GMT Not After : Dec 7 20:00:49 2025 GMT Subject: CN=ff6ef9cc331af233bf2d5ca8335894cc5261c1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:a5:b1:3d:51:46:0c:2e:df:86:db:8d:5b: 75:4c:04:db:a5:25:57:f4:30:cf:12:f8:17:0a:30: bd:1b:54:f9:83:53:70:3f:74:83:d9:0f:a6:fb:c4: d8:8d:e7:3a:96:b1:c3:2e:9d:93:ef:63:10:97:6d: 52:50:c3:df:46:6b:9c:b0:1e:3b:f9:99:36:90:d1: 27:d4:41:54:ff:75:46:0c:c6:79:03:f1:fa:95:e3: c7:ad:a2:97:b6:c3:e8:86:e0:ab:30:32:28:01:5c: 55:17:7e:34:da:70:8e:44:e8:40:88:a7:57:46:47: c6:32:c0:a3:56:07:4c:d4:58:2b:64:b2:7e:2f:d7: 31:10:0f:8c:0b:bb:65:80:18:7e:be:65:08:1b:45: 7f:f5:32:4d:1e:11:6c:88:56:a7:72:8b:b7:52:a1: da:e5:f9:c6:c4:c7:9b:c7:d5:f8:4e:19:bd:b0:52: 21:71:0a:92:97:5f:76:96:fa:e8:67:15:9f:d2:8b: 19:57:6a:af:27:66:de:bc:02:e7:42:f8:d3:50:30: 56:34:79:7b:0c:a7:33:91:5f:ce:54:de:fa:5d:c4: 93:e0:2f:99:2d:19:3a:ae:79:2b:c0:6d:0f:47:e6: 4d:2b:95:67:85:cb:c5:f7:44:77:1c:4c:dd:6f:bd: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6E:F9:CC:33:1A:F2:33:BF:2D:5C:A8:33:58:94:CC:52:61:C1:B8 X509v3 Authority Key Identifier: keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:82:3f:2a:25:32:1b:56:db:1c:87:03:a7:cf:57:8c:78:23: 94:c0:1f:f1:a6:0e:da:5c:32:c0:90:2a:87:88:2d:a0:01:ad: 4e:b4:1f:ed:52:f1:23:f2:0f:38:0b:bc:9b:a4:32:66:46:0d: 23:b9:b7:4f:38:b9:43:1e:e1:13:2c:82:31:ab:1e:03:57:ac: 26:65:50:cf:2d:c3:79:02:94:56:38:78:50:3b:b8:37:3b:1a: 09:47:8c:5f:7b:0f:6b:37:81:45:7d:6c:b8:59:64:e6:6b:71: a3:4c:8d:0a:b4:16:88:0b:ef:6b:e1:06:b8:43:cf:4f:37:d3: 89:09:45:61:af:46:04:5a:b3:63:3e:ed:ff:bb:bf:c6:64:ef: ba:de:db:7d:67:8e:b7:44:24:29:42:2b:31:8e:ea:0d:f1:f1: 8c:83:40:36:ca:f3:22:00:75:1b:6a:b0:83:69:29:d3:21:85: d4:9c:98:28:2a:02:27:ff:10:76:99:91:f1:aa:51:32:fe:c2: 39:76:98:29:8b:51:96:dc:bb:f2:d5:e4:10:2b:2d:22:9c:be: fd:ca:6d:e6:a4:50:99:4f:7e:f5:cd:49:d8:27:c9:ed:3c:4a: c6:2d:2b:a7:f9:ab:f9:6e:d5:0e:c2:92:71:75:1e:9b:2d:b3: a4:71:6e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLOGNED63w6nD3rOsz6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjI3MjIxYzE4ZmNhZmU3NDg5MmJjMGU5N2JmNWVlN2Mz NDRmYTcwHhcNMjUxMjA2MjAwMDQ5WhcNMjUxMjA3MjAwMDQ5WjAzMTEwLwYDVQQD EyhmZjZlZjljYzMzMWFmMjMzYmYyZDVjYTgzMzU4OTRjYzUyNjFjMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwamlsT1RRgwu34bbjVt1TATbpSVX 9DDPEvgXCjC9G1T5g1NwP3SD2Q+m+8TYjec6lrHDLp2T72MQl21SUMPfRmucsB47 +Zk2kNEn1EFU/3VGDMZ5A/H6lePHraKXtsPohuCrMDIoAVxVF3402nCOROhAiKdX RkfGMsCjVgdM1FgrZLJ+L9cxEA+MC7tlgBh+vmUIG0V/9TJNHhFsiFancou3UqHa 5fnGxMebx9X4Thm9sFIhcQqSl192lvroZxWf0osZV2qvJ2bevALnQvjTUDBWNHl7 DKczkV/OVN76XcST4C+ZLRk6rnkrwG0PR+ZNK5VnhcvF90R3HEzdb717gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9u+cwzGvIzvy1cqDNYlMxSYcG4MB8GA1UdIwQY MBaAFF3yciHBj8r+dIkrwOl79e58NE+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZKeUljR1B5djUwaVN2QTZYdjE3bncwVDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjg5MzctODkwMy00OTVkLWJjNmMt ZjNlOTE1YWQzODAyLzEvWGZKeUljR1B5djUwaVN2QTZYdjE3bncwVDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wMjg5MzctODkwMy00OTVkLWJjNmMtZjNlOTE1YWQzODAy LzEvWGZKeUljR1B5djUwaVN2QTZYdjE3bncwVDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoI/KiUy G1bbHIcDp89XjHgjlMAf8aYO2lwywJAqh4gtoAGtTrQf7VLxI/IPOAu8m6QyZkYN I7m3Tzi5Qx7hEyyCMaseA1esJmVQzy3DeQKUVjh4UDu4NzsaCUeMX3sPazeBRX1s uFlk5mtxo0yNCrQWiAvva+EGuEPPTzfTiQlFYa9GBFqzYz7t/7u/xmTvut7bfWeO t0QkKUIrMY7qDfHxjINANsrzIgB1G2qwg2kp0yGF1JyYKCoCJ/8QdpmR8apRMv7C OXaYKYtRlty78tXkECstIpy+/cpt5qRQmU9+9c1J2CfJ7TxKxi0rp/mr+W7VDsKS cXUemy2zpHFuzg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:21 2025 by rpki-client